Server data from the Official MCP Registry
kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.
kube-linter audit for Kubernetes manifests — 63 checks: security, availability, RBAC, network.
Remote endpoints: streamable-http: https://unbearable-dev--k8s-manifest-audit.apify.actor/mcp
Well-structured MCP server with appropriate authentication via Bearer token, proper input validation, and safe subprocess handling. The server delegates actual linting to kube-linter (external binary) via controlled subprocess calls with timeouts. Minor code quality observations (broad exception handling, logging of check names) do not raise security concerns. Permissions are appropriately scoped to the server's purpose of auditing Kubernetes manifests. Supply chain analysis found 3 known vulnerabilities in dependencies (1 critical, 1 high severity).
5 files analyzed · 6 issues found
Security scores are indicators to help you make informed decisions, not guarantees. Always review permissions before connecting any MCP server.
This plugin requests these system permissions. Most are normal for its category.
Available as Local & Remote
This plugin can run on your machine or connect to a hosted endpoint. during install.
From the project's GitHub README.
k8s-manifest-audit — static audit of Kubernetes manifests via MCP. Powered by kube-linter. Part of the Unbearable Labs audit shop.
Built by Unbearable Labs. Pay-per-event pricing — only billed when a tool is actually called.
Point any MCP-capable client (Claude Desktop, Cursor, n8n, Make, Zapier, custom agents) at this server, hand it a Kubernetes manifest or directory of manifests, get back a structured report:
privileged-container, unset-cpu-requirements)63 checks total (31 enabled by default). Covers Deployment, Service, Ingress, ConfigMap, Secret, StatefulSet, DaemonSet, Job, CronJob, NetworkPolicy, RBAC, HPA, PDB, and more.
| Tool | Pricing | Purpose |
|---|---|---|
audit_manifest(yaml_content) | $0.02 | Audit a single YAML string (may contain multi-doc ---) |
audit_directory(files) | $0.02 | Audit multiple files — cross-file checks work correctly |
list_checks(enabled_only=False) | $0.005 | Browse the full 63-check catalog with severity + category |
explain_check(check_id) | $0.005 | Get description + remediation for one specific check |
{
"mcpServers": {
"k8s-manifest-audit": {
"url": "https://unbearable-dev--k8s-manifest-audit.apify.actor/mcp",
"headers": { "Authorization": "Bearer <YOUR_APIFY_TOKEN>" }
}
}
}
| Check ID | Category | Severity (mapped) |
|---|---|---|
privileged-container | security | high |
privilege-escalation-container | security | high |
run-as-non-root | security | high |
env-var-secret | security | high |
host-pid / host-ipc / host-network | security | high |
wildcard-in-rules | rbac | high |
cluster-admin-role-binding | rbac | high |
unset-cpu-requirements | resources | medium |
unset-memory-requirements | resources | medium |
no-liveness-probe / no-readiness-probe | availability | medium |
latest-tag | images | medium |
minimum-three-replicas | availability | medium |
no-rolling-update-strategy | availability | medium |
dangling-service / dangling-ingress | config | low |
use-namespace | config | low |
Use list_checks to get the full, up-to-date catalog.
| Event | USD |
|---|---|
audit_manifest or audit_directory call | $0.02 |
list_checks or explain_check call | $0.005 |
Powered by kube-linter (MIT, StackRox/Red Hat).
Built by Noel @ Unbearable Labs — more like this in the weekly newsletter.
Be the first to review this server!
by Toleno · Developer Tools
Toleno Network MCP Server — Manage your Toleno mining account with Claude AI using natural language.
by mcp-marketplace · Developer Tools
Create, build, and publish Python MCP servers to PyPI — conversationally.
by Microsoft · Content & Media
Convert files (PDF, Word, Excel, images, audio) to Markdown for LLM consumption